Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/acf730e3-0743-4cb3-86af-cf2c9d1b68c4.cer
File:                     acf730e3-0743-4cb3-86af-cf2c9d1b68c4.cer (raw, json)
Hash identifier:          FcUQA4IW8tHcZiPeOJQRndwIHx8tndic/WyJjASAHPs=
Subject key identifier:   08:DB:31:21:AF:F8:3F:5E:4F:95:26:82:FC:97:56:69:4C:B3:C4:8B
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584139B953F8066321DA43129F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/acf730e3-0743-4cb3-86af-cf2c9d1b68c4/acf730e3-0743-4cb3-86af-cf2c9d1b68c4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/acf730e3-0743-4cb3-86af-cf2c9d1b68c4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 15 Mar 2023 14:52:49 +0000
Certificate not after:    Tue 17 Jun 2025 14:52:49 +0000
Subordinate resources:    AS: 25830
                          IP: 68.234.96.0/19
                          IP: 199.195.52.0/22
                          IP: 2604:a40::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:39:b9:53:f8:06:63:21:da:43:12:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Mar 15 14:52:49 2023 GMT
            Not After : Jun 17 14:52:49 2025 GMT
        Subject: CN=acf730e3-0743-4cb3-86af-cf2c9d1b68c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:33:2f:b5:c0:91:05:86:45:d6:23:8d:7b:
                    81:b9:fa:c7:de:2b:55:ea:3f:fe:4c:e6:5e:69:2a:
                    89:b2:1c:76:dc:1c:e0:76:cd:04:fb:77:1a:b1:28:
                    3d:b5:78:a4:f2:ff:45:5f:45:d6:92:43:e4:97:f7:
                    35:ec:2f:6f:d3:6d:e5:05:c3:82:5a:30:bd:d4:1d:
                    74:1a:95:13:ca:18:d7:5f:ef:b8:1e:1b:a4:fc:e4:
                    e1:4e:f6:d1:61:6a:49:d7:ba:52:00:d6:a6:a7:b3:
                    fd:82:e1:79:00:08:f5:96:18:38:6f:f7:89:68:85:
                    9d:2b:a9:51:7f:43:8c:d1:28:bd:0f:e0:00:da:d1:
                    06:60:3a:3f:70:4d:4e:59:a4:fc:0c:18:45:5e:98:
                    c9:bb:74:cc:f0:e2:b8:55:18:a2:d2:23:72:e3:a4:
                    78:52:a4:2c:fa:e0:34:ac:52:01:8c:36:f5:22:72:
                    b4:1f:3f:2e:c4:17:54:14:ec:a8:b5:e9:b2:a8:47:
                    0c:bc:c6:a9:25:b7:14:c1:ab:da:a7:7f:0c:11:ee:
                    ea:b2:78:d8:a3:9c:a2:48:f7:05:bc:5f:c1:c4:72:
                    6a:70:43:67:cc:f6:a9:03:53:bc:be:c3:7d:bb:6f:
                    e7:7a:76:65:22:55:94:0f:b9:4a:7b:8b:62:34:ed:
                    51:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DB:31:21:AF:F8:3F:5E:4F:95:26:82:FC:97:56:69:4C:B3:C4:8B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/acf730e3-0743-4cb3-86af-cf2c9d1b68c4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/acf730e3-0743-4cb3-86af-cf2c9d1b68c4/acf730e3-0743-4cb3-86af-cf2c9d1b68c4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.96.0/19
                  199.195.52.0/22
                IPv6:
                  2604:a40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25830

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:c8:d7:10:c2:42:08:4d:27:4b:20:36:dd:f2:84:56:46:75:
         1a:f9:9d:b5:6f:61:87:c4:55:54:80:a7:7d:c7:17:35:0e:a3:
         4e:54:95:b4:8b:0c:31:77:15:b3:0e:d0:66:ff:a4:68:be:c0:
         f8:8f:8a:25:7a:12:3f:6d:52:07:34:39:b9:44:4e:aa:34:85:
         3c:7e:90:b1:bf:f0:26:a0:b7:82:7a:fa:ce:e9:4c:83:7a:04:
         5f:98:fc:a2:61:97:a6:13:6b:15:65:c5:25:4e:d9:a4:8a:7f:
         19:05:a1:26:3a:72:78:f8:a0:ca:62:5c:5f:52:35:16:fc:a7:
         47:15:2a:ff:e5:0d:9f:2e:a0:39:ea:d5:e7:6e:1c:d9:18:ce:
         c1:e8:10:7e:7b:dc:1c:32:be:11:80:77:1c:0e:6b:d3:43:b9:
         46:e3:f3:33:3b:31:11:37:10:89:97:0b:d9:be:f4:0c:f8:d3:
         80:70:35:ab:a4:f0:16:19:cb:fd:06:08:f1:d9:9c:b8:51:a2:
         d6:04:51:f6:fd:0c:6e:d5:e2:c3:96:ed:85:54:23:03:1a:ab:
         9e:82:bc:ea:f5:10:3c:d7:bd:46:1b:51:ae:3d:69:8f:67:b3:
         0e:81:b4:24:96:d9:6e:c7:e3:24:40:5a:59:13:f3:d7:fd:db:
         4c:8a:13:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:50 2023 by rpki-client on console-fra.rpki-client.org